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Sir: 

In response to the Examiner's Answer mailed 01/05/2007, Appellants file this 
Reply Brief in accordance with 37 C.F.R. § 41.41 . 



AUTHORIZA HON TO DEBIT AC CO ION I 

It is believed that no extensions of time or fees are required, beyond those thai 
may otherwise be provided for in documents accompanying this paper. However, in tlie 
event that additional extensions of time are necessary to allow consideration of thi s paper, 
such extensions are hereby petitioned under 37 C.F.R. § 1 .136(a), and any fees required 
(inehiding fees for net addition of claims) are hereby authorized to be charged to Hewlett- 
Packard Development Company's depo.sit account no. 08-2025. 
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Status of Claims 

Applicants acknowledge that the status of the claims is as follows: 

Claims 7-9, 1 0-1 L and 1 8 are objected to but would be aiiowed if 
rewritten In independent fonn to include all tlmhatioTB of the base claim 
and any inten'ening claims. 

Response to Examiner^s Arguments 

Appellants ioms the Reply Brief on the following issue: Does the art of record 
teach or s uggest each element in the claims? The ait of record does not. Some extuiipies 

are provided below. 

By way of example, independent claims 1, 12, 19, 22, 24, 25, and 27 recite that 
"verification of only the a.ppiiance ID is suSlcient to authorize access to the private 
database" (emphasis added). Appl icants respectfully ask the Board of Appeals to give 
weight to each and every w?ord in the claim, 'flie art of record does not disclose or even 
sugge,st verifying "only" the appliance ID to authorize access to a private database. 

The Examiner provides several different ai-gimients slating that the combination 
of Crarrison and Rezvaiu teach or suggest this element. Appellants respectfully disagree 
and address these arguments. 

First, in section V of the Answer brief, the Examiner argues: 

The prior art cited provides considerable more security than the 
appellant and thus would haw used only an appliance ID many 
"generations" ago, meaning iuUhentication processes have evolved 
fjfom "veritying though an in-person vi,sit" (eg. when using a 
notary) to remotely authenticating a user (eg. such as taught by 
(3arrison), (See lixaminer's .Answer at p. 20). 

Appellants strongly disagree becau se the statements of the Examiner are not 
supported in the art. The Examitier states his own pet^onal beliefs and conclusions 
wdtlioiit support from the actual teachings in the references tliemselves. Where does the 
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combination of Ganison and Rezvani teach or suggest that appliances developed 
"■generatioTis" ago used only an appliance identification lo authorize access to a private 
databaw ' ( lam^nn md Rc/\ani Jo no; ^../o v\ ^ „„>.s ~..k h \ dim^^^ 

In toniia-,! to iding peisonal beliefs. AppellaiUs [mu\ ide iitL'umi.nts K5M.d on 
teachmgN .Ktua!l\ m the icfercnccs. hig. 4A in Garrison i^ a llowcliatt that dc'^i.Hlxs the 
complex kcs exchange between a user and a sen er in order to idcutiij a uici and gi am 
access to the server. Garrison states how the access is performed: 

After receiving the new encryption key from the ser\'er 17a, the 
client 14 encrypts the user's password and log name with the new 
encryption Icey and transmits the password and log miine to the 
serv'er 17a .... 

The server 1 7a compares the log name transtnitted by the client 1 4 
with tiie log name in the password data table entry^ corresponding 
with the password, If the l og names match, the user of the ch ent 14 
is determined to be an authorized user. (See [0066 ~ 0067]: 
portions omitted tbr brevity). 

Garrison expressly states that a user must send a password and login name so the 
server can verify tlie user. Garrison repeatedly teaches that his access request identifies 
the user, not the wireless device. Nowhere does this section or any section of Gani son 
(aione or in combination with Rezvani) teach or suggest that verification of mi|v the 
application ID is sufficient to authorize access to the private database. 

Paragraph [0004] of Rezvani states that cellular phones have electronic subscriber 
numbers (ESNs) that uniquely identify the ceihilar phone. Paragraphs [0108-01 11 J of 
Reiivani state that various communication links can be used to connect a wireless device 
with a ser\'er. Finally, paragraph [01 13] of Rezvani states that the wireless device can be 
various embodiments, such as cellular phonesK persona! digital assistants, and computers. 
Notice, howver, that nowhere does Rezvani (alone or in combination with Garrison) 
teach or suggest whatsoever that the ESN itself is used to provide access to a private 
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database. In other words, Reijvam teaches that ESNs on celkiiar phones are known. Biit 
Rexvani never teaches or suggests that only the ESN is sufficient to authorize access to a 
private database. 

Second, in section VI of the .Answer briei'. the Exaniioer argues thai Ciarrisori 
inherentiy teaches the claim element of ''veritlcation of only the appiiance ID is sufficient 
to authorize access to the private database" (see Examiner's Answer at p. 20). Fhe 
Examiner argues that "Garrisoti/Rezvani teach a more robust systetn, but at a tninitnutn, 
some piece(s) of the data must be exchanged before a user will be grattted access" (see 
M). In other words, the Examiner argues that since (jarrison/Rezvatii teach a tnore 
complex or robust electronic system, then CiaiTisoa Rezvani must therefore teach the 
claim element of using only an appHance idenii ficaiion k> autliorize access to a private 
database. Appeihmts strongly disagree with tliese arguments because they are not 
supported in the actual teachings and suggestions in Garrisojv'Rez\'ani. 

Garrison teaches a coinptex key exchange between a user and a server to identify 
a user and provide him or her with access to the server. Appellants respectfully ask tlie 
Board of Appeals to read paragraphs [()()47 - (K)49| and [0065 - 0068] in (lanison (these 
paragraphs teach a complex key exchange bcu\'een the user and server). Further, Rezvani 
states that cellular phones have ESNs that imiquely identify the cellular phone. Rezvani, 
however, does not discuss ESNs in a context of using such a number to provide access to 
a private database. In other words, the combined teachings of Garrison and Rezvani never 
suggest that verification of "only" the ESN is sufficient to grant access to a database. 

Third, the Examiner argues that Appeliants are merely attacking Garrison and 
Rezvani individually and not analyzing the combined teachings. Appellants respectfully 
disagree. Appellants have discussed the teachings of Garrison and Rezvani individually 
and the teachings and suggestions of combining these references. 

As noted above. Garrison teaches a complex key exchange between a user and 
ser\'er. Rezvani states that cellular devices have IiSNs, lliere is no suggestion whatsoever 
to remove tlie cotnplex key exchange in Garrison and replace this key exchange with the 
ESN in Rezvani siteh tliat ''veri fication of only the appliance ID is sui^lcient to authorize 
access to the private database." Appellatits respectfully argue that the Examiner is 
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picking and choosing unrelated sentences or teachings from Garrison and Rezvani with 
hindsight of Appellants' in vention to alleged jy obviate the pending claims. 

In view of the above, Appellants believe thai ail pending claims are in condition 
for allowance. Allowance of these claims is respectfuHy requested. 



Respectfully submitted, 

/Philip S. l.yren #40,709/ 

Phi lip S- I..vren 
Reg. No. 40,709 
Ph: 832-236-5529 
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